pycolorom

MAL-2026-96

PyPItyposquat1/6/2026
Description

Malicious code in pycolorom (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
6babcee81c12759b66be4c0a8ba33c3f0272b052a47fda31227f4a6087ba8e5b
52206f99bec4bc356ae9efc68430a8412d28d1e80a7d25a8108dc0acda81c6af
a8c2ce5dba961bbfdc0f303b0a3ec633d35ba030e03bd076a432d1833bf78997
26f5d6d03dee6f6daa76be41653ef85c46e10a2e69c13ac10bc03d9c7576a427
Domains (1)
server-unlock-hack.onrender.com
References (2)
https://bad-packages.kam193.eu/pypi/package/pycoloromOSVhttps://www.getsafety.com/blog-posts/telegrem-bot-malwareOSV
Details
EcosystemPyPI
Attack Typetyposquat
Published1/6/2026
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001